Platform Security Engineer (x/f/m)
<h2 class="pb-2 pt-4 heading-xl text-foreground">Set a new pulse for healthcare!</h2>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">We are looking for a <strong class="font-semibold text-foreground">Platform Security Engineer</strong> to join the <strong class="font-semibold text-foreground">Security</strong> team at Doctolib.</div>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Your mission will be to protect sensitive healthcare data while enabling rapid, secure innovation. You will be responsible for securing Doctolib's cloud infrastructure and application ecosystem, combining multi-cloud security expertise with hands-on platform engineering — contributing directly to the safety of millions of patients and care teams who rely on our platform every day.</div>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Working in the tech team at Doctolib means building innovative products and features to improve the daily lives of care teams and patients.</div>
<h2 class="pb-2 pt-4 heading-xl text-foreground">What you'll do</h2>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Your responsibilities include but are not limited to:</div>
<ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed">
<li class="break-words text-foreground text-base leading-relaxed">Own a platform security workstream end to end, from architecture to enforcement: scope it with your tech lead, design the control, roll it out progressively (report-only, then enforce), handle exceptions, and see it through to full coverage. Typical examples: hardening IAM across our AWS accounts, tightening cluster admission policies, or closing a class of misconfiguration for good.</li>
<li class="break-words text-foreground text-base leading-relaxed">Ship every change as code: Terraform and GitHub pull requests, peer-reviewed and always reversible. No console clicking, no undocumented state.</li>
<li class="break-words text-foreground text-base leading-relaxed">Harden our cloud and infrastructure baseline and keep it hardened: IAM permissions and access reviews, secrets management, network and cluster guardrails, CI/CD and supply chain controls — building the guardrails and driving remediation of what they surface with platform and engineering teams, turning recurring findings into automation rather than tickets.</li>
<li class="break-words text-foreground text-base leading-relaxed">Investigate and improve: lead incident investigations on the platform perimeter end to end, and continuously improve detection rules and response playbooks in our Elastic SIEM.</li>
<li class="break-words text-foreground text-base leading-relaxed">Work in the open: write clear technical notes, drive adoption of your changes with the engineering teams they affect, and grow through code review and pairing with the rest of the team.</li>
</ul>
<h2 class="pb-2 pt-4 heading-xl text-foreground">Who you are</h2>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground">Before you read on: if you don't have the exact profile described below, but you feel this job description matches your skill set, we still encourage you to apply.</div>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><strong class="font-semibold text-foreground">You'll be a great fit if you:</strong></div>
<ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed">
<li class="break-words text-foreground text-base leading-relaxed">Have 1 to 3 years of hands-on experience in security engineering, security operations, SRE, infrastructure or platform engineering, including some exposure to a cloud environment (AWS, GCP or Azure) in production — an internship or apprenticeship in one of those roles counts.</li>
<li class="break-words text-foreground text-base leading-relaxed">Work daily with infrastructure as code and GitHub: you have written and shipped your own Terraform through reviewed pull requests, and you are comfortable operating and debugging workloads on Kubernetes.</li>
<li class="break-words text-foreground text-base leading-relaxed">Use AI coding assistants (Claude or equivalent) as a normal part of how you work.</li>
<li class="break-words text-foreground text-base leading-relaxed">Have carried at least one project through to production — security or not — and stayed with it past the first deployment until it was actually adopted.</li>
<li class="break-words text-foreground text-base leading-relaxed">Have solid fundamentals: Linux, networking, cloud, Kubernetes and development/scripting, a pragmatic mindset, the ability to make decisions under uncertainty and follow through, and strong written communication skills — you can carry a proposal from draft to cross-team adoption.</li>
<li class="break-words text-foreground text-base leading-relaxed">Are fluent in English (working language in writing); daily team conversations happen mostly in French, so being a French speaker or willing to learn is a strong plus.</li>
</ul>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><strong class="font-semibold text-foreground">It would be fantastic if you:</strong></div>
<ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed">
<li class="break-words text-foreground text-base leading-relaxed">Have worked with a SIEM (Elastic, Splunk, or equivalent), writing and tuning your own queries.</li>
<li class="break-words text-foreground text-base leading-relaxed">Have done detection engineering, incident response, threat hunting, or CTFs.</li>
<li class="break-words text-foreground text-base leading-relaxed">Can point to public write-ups, open-source contributions, or a home lab.</li>
<li class="break-words text-foreground text-base leading-relaxed">Have prior experience in a regulated industry (healthcare, fintech, or public sector).</li>
</ul>
<h2 class="pb-2 pt-4 heading-xl text-foreground">Life at Doctolib Tech</h2>
<ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed">
<li class="break-words text-foreground text-base leading-relaxed">Our solutions are built on a single fully cloud-native platform that supports web and mobile app interfaces, multiple languages, and is adapted to country and healthcare specialty requirements.</li>
<li class="break-words text-foreground text-base leading-relaxed">Our stack is composed of Rails, TypeScript, Java, Python, Kotlin, Swift, and React Native.</li>
<li class="break-words text-foreground text-base leading-relaxed">We leverage AI ethically across our products to empower patients and health professionals. Discover our AI vision <a class="break-all font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark" href="https://careers.doctolib.com/ai-careers/" target="_blank">here</a>.</li>
</ul>
<div class="whitespace-pre-wrap break-words font-normal first:pt-0 last:pb-0 py-1 @md:pt-2 @md:pb-[10px] @md:leading-relaxed text-base leading-relaxed text-foreground"><em>Want to learn more about our tech culture and environment? Visit the <a class="break-all font-semibold transition-all duration-200 ease-in-out hover:underline text-highlight hover:text-highlight-400 active:text-highlight-dark" href="https://careers.doctolib.com/tech-doctolib/" target="_blank">Doctolib Tech site</a>.</em></div>
<h2 class="pb-2 pt-4 heading-xl text-foreground">What we offer</h2>
<ul class="pb-2 flex flex-col gap-1 list-disc pl-6 text-foreground text-base leading-relaxed">
<li class="break-words text-foreground text-base leading-relaxed">Free comprehensive health insurance (basic package) for you and your children</li>
<li class="break-words text-foreground text-base leading-relaxed">25 days of paid vacation per year, plus up to 14 days of RTT</li>
<li class="break-words text-foreground text-base leading-relaxed">Free mental health and coaching services through our partner Moka.care</li>
<li class="break-words text-foreground text-base leading-relaxed">Work from abroad for up to 10 days per year thanks to our flexibility days policy</li>
<li class="break-words text-foreground text-base leading-relaxed">Lunch vouchers (Swile card) worth €8.50 per working day, with €4.50 covered by Doctolib</li>
<li class="break-words text-foreground text-base leading-relaxed">A subsidy from the work council to refund part of the membership to a sport club or a creative class</li>
<li class="break-words text-foreground text-base leading-relaxed">50% reimbursement of your public transport subscription</li>
<li class="break-words text-foreground text-base leading-relaxed">ParentCare Program: Enjoy full salary coverage (100%) during your first month of birth leave and 75% during the second, covered by Doctolib</li>
<li class="break-words text-foreground text-base leading-relaxed">Enrollment in Doctolib's long-term employee value sharing plan called DoctoGrowth</li>
<li class="break-words text-foreground text-base leading-relaxed">For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support</li>
<li class="break-wo
Cette annonce provient de Greenhouse. Voir l'annonce originale ↗